Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super App, die bitte nie eingestellt werden darf.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2657230937

Proof data

Record hash (SHA-256)

364478b74c691e0a4b1f8de59bff36278639ce16bcdba84f0f0df192b799423d

Signature (Ed25519, base64)

a60ZLPTtXVDQFU+r0TQBPdfETeRa96CB639ASj2tG+5m9ApWBYvMLAJ8ccx2d0itOaawie0kApF03SCNedSIAg==

Merkle root

2915d94fc718eb48f67362a65d9a83b80dcd4c926c786eb2e38f4d8ced0439b7

Merkle path

["363a6acbc39e4ab257d47c7fb8113263ac49a021fbcef91a6bc76ea702f2b0a2","d43adeeda2f84a18f8bf0da4a2e828c06d32d8580261a323239d43c69794d8f1","5371f1c05aa6afc1abf9e7574ca7ce00f4aa5a4aacabb09a8289849556721453","8ed69c9706762c0e0f6d3994c2bbf19890dfe17d65566816e9fc19e02ae94da2","f7a068fd29b13182e046166a52a8338afc6ef588318eb0d9af6c068eaac2f544","4d13c1abcd9130d7cb0152c44b6edeb4beec214278b0859f4affcda7e8a5b0b7","1dcd3daf4782348ccd1434ea5375e435828b0a442a88fe0a763ff721e1e6de53","d914868a75de227e980ea00a012a6d0e75048bb5e71593c3105aae30e08ac1c7","fc470cae6353afba52176c0f77e529a130c3f0592851c7aa8b9cd0a72c592528","cfcbe897255bafa553ed9f12756258e9543379cd573385ead7e441ff995a2d5b","1577e2636bea166dfa7cf77d56e0a039eab729a61c6e6d919aea52dbcc6e9151","b18ed929ae9f2e5e75dd61203060274e424f923cdfe32c2a74359282da4ee67d","5448c84b5b8bcd5fb137f966b2689de96fb00d271e969f9decbd30d6d4a26393","5b8a2081ec81ef2101256bd7209457c75dcc1be14257b40200d45a88003c0c32","1936eb7713ae59e20354a37b8314d3745433b23d047da205242414a6fea32b67"]

Anchored

2026-08-31

Public log entry

search.sigstore.dev, log index 2657230937 · entry 108e9186e8c5677a80c3…

Expected log hash

1d9aec1bd239e45b6e622f366eaab4292482e627111ddcfb4c651bb1e08e92ad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788143889053","kind":"published-quote","locale":"de","page":"brand:tomorrowio","quote":"Super App, die bitte nie eingestellt werden darf.","rating":5,"review_date":"2026-07-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=co.climacell.climacell","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2915d94fc718…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.